43b55ac01984f389209771469eaff0e5_JaffaCakes118 | Triage

Sharing

General

Target

43b55ac01984f389209771469eaff0e5_JaffaCakes118
Size

425KB
MD5

43b55ac01984f389209771469eaff0e5
SHA1

e7788c1ff4cae7f9231273ce54d1d34445d9729a
SHA256

a1dacc5efb8ae521a301feeefe6572004e411f01136ebd7f224d9aefc361e419
SHA512

4194de2799999aca54dfb77e6342b0552e18ebe1f2b1f259b0615c33b544eb78dd20f3e86009498ae49bd6b8a7a6f72bfbd924fc17df94cf797e99c35336a21b
SSDEEP

12288:3OhjDuKv0GAhlTcpYQFzICzizPTpLUPqSLlWzvqpSeO9df1Q:3OhjDus1AhlTcptFzIjzPTpLaqUOUSJI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43b55ac01984f389209771469eaff0e5_JaffaCakes118

Files

43b55ac01984f389209771469eaff0e5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 372KB - Virtual size: 371KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 177KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ